From owner-freebsd-questions  Tue Feb 12  8: 7:46 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.broadpark.no (217-13-4-9.dd.nextgentel.com [217.13.4.9])
	by hub.freebsd.org (Postfix) with ESMTP id 2CE7537B400
	for <freebsd-questions@freebsd.org>; Tue, 12 Feb 2002 08:07:44 -0800 (PST)
Received: from ninja.amphex.com (ninja.amphex.com [217.13.29.51])
	by mail.broadpark.no (Postfix) with SMTP id 58BC07D60
	for <freebsd-questions@freebsd.org>; Tue, 12 Feb 2002 17:01:35 +0100 (MET)
Date: Tue, 12 Feb 2002 17:01:33 +0100
From: J.S. <johann@broadpark.no>
To: freebsd-questions@freebsd.org
Subject: Am I being hacked?! Strange connection attempts
Message-Id: <20020212170133.3bf6d5c9.johann@broadpark.no>
X-Mailer: Sylpheed version 0.7.0 (GTK+ 1.2.10; i386--freebsd4.4)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

During the last few weeks (months?) I've been getting a few thousand of these into /var/log/messages:

Feb 12 14:37:36 ninja ftpd[4697]: FTP LOGIN FAILED FROM mp-217-217-113.daxnet.no, johann

And today, I've been getting about a few hundred of these (although all on different ports):

Feb 12 14:56:16 ninja /kernel: Connection attempt to TCP 10.0.0.2:1433 from 61.153.3.67:2230

Excactly what is going on?

Thanks.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message